Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/3NrJgDI1SNMu2ARE7RGgI6_NJfk.roa
File:                     3NrJgDI1SNMu2ARE7RGgI6_NJfk.roa (raw, json)
Hash identifier:          LEraQiOCsFYGwktJRCJtzb7x9nyxh+v3AJJHTqA4umY=
Subject key identifier:   DC:DA:C9:80:32:35:48:D3:2E:D8:04:44:ED:11:A0:23:AF:CD:25:F9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       04D9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3NrJgDI1SNMu2ARE7RGgI6_NJfk.roa
Signing time:             Tue 31 Mar 2026 08:13:21 +0000
ROA not before:           Tue 31 Mar 2026 08:13:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        210.211.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:13:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DCDAC980323548D32ED80444ED11A023AFCD25F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:5a:0f:7b:40:08:26:34:e4:8a:e4:83:82:
                    40:21:81:5e:21:78:3f:89:65:38:dd:d7:18:0d:08:
                    4d:70:53:76:af:2a:5e:b5:dc:b7:1d:be:65:3e:2e:
                    01:c5:7e:0b:d7:ef:29:21:01:9d:6e:02:59:55:1a:
                    0f:38:eb:90:21:db:76:a6:da:c5:0c:ee:1f:4f:f8:
                    1c:69:5d:a1:4e:50:4d:60:54:8b:81:ea:fe:5a:33:
                    52:9c:90:05:6d:16:c9:1d:1d:ea:1a:d4:13:7f:80:
                    31:16:d2:f2:f4:47:37:5a:f9:8b:aa:d5:ab:e8:c9:
                    a9:01:9c:55:35:6f:6b:e8:26:45:8c:68:d7:af:e0:
                    15:05:ab:37:83:d4:4e:de:96:bd:8e:a1:6b:2a:b5:
                    61:1c:be:a2:99:fd:1f:b5:e6:a6:af:ba:b4:41:d6:
                    a9:72:3b:52:35:fa:9c:ee:68:b5:a7:07:e4:a3:2d:
                    c8:8f:75:fd:f6:37:fe:48:40:51:0d:93:83:f4:af:
                    16:d2:d7:82:06:82:78:96:37:21:3c:6d:d7:ba:cc:
                    93:d8:6c:20:6f:45:b8:0f:67:50:97:5b:94:b7:5b:
                    4c:ce:c3:25:c8:91:e2:07:bb:68:f3:d7:26:63:6f:
                    e1:9e:79:eb:df:bb:a4:99:98:11:c5:12:a4:08:04:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DA:C9:80:32:35:48:D3:2E:D8:04:44:ED:11:A0:23:AF:CD:25:F9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3NrJgDI1SNMu2ARE7RGgI6_NJfk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.211.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         de:eb:ef:d6:e6:24:a7:64:7e:b0:ed:06:53:0e:86:ac:08:07:
         11:17:29:e9:58:29:7f:32:0c:80:ec:6f:61:a4:0b:90:56:b0:
         ef:c8:cc:b6:bc:fc:2a:3a:20:a7:e6:c1:c9:95:b6:64:59:06:
         c9:e5:7d:06:e5:e8:81:4a:8f:f7:37:34:e6:81:86:b2:82:d1:
         49:84:ef:2a:dd:1d:4b:d0:b4:5e:63:25:2c:33:fd:32:3b:c3:
         a9:31:e8:11:a6:a5:38:f1:99:4b:12:53:de:a6:13:be:60:82:
         70:6c:c1:7d:9f:74:39:90:93:ed:36:3a:ea:43:e1:c4:77:01:
         77:36:52:92:d2:ab:d8:06:bb:1c:18:af:eb:92:22:ff:a8:4f:
         0e:7d:04:b4:e7:5d:26:12:be:c4:1c:71:92:83:41:df:6e:a6:
         a7:00:ac:c4:8c:8f:58:1f:4f:d2:00:ff:de:36:9c:90:f4:2a:
         ac:09:27:07:97:f3:59:b5:01:e4:f0:68:3c:c7:d9:1f:e7:ae:
         7a:e7:af:e6:e2:72:00:9a:b8:1f:54:34:70:3d:1f:f9:53:fa:
         b9:a4:da:af:ea:ae:34:99:06:6c:d6:d0:65:01:ad:e1:37:f2:
         3f:66:54:6b:33:20:9e:f7:ba:fc:0a:00:fb:42:74:93:10:fc:
         fb:37:f7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:08 2026 by rpki-client